Limit access to CM proxy to 127.0.0.1 (refs #25820).

2.Common_services/5.Nginx/vhost_skyreach.conf

@@ -51,6 +51,8 @@ server {
 	}
 
 	location /proxy/ {
+		allow 127.0.0.1;
+		deny all;
 		# proxy for MediaCoder UI and files
 		# ?: means that the group should not be stored as variable